shiichan

MCP server portals get a homepage and sign-out!

Hey everyone, it's Shiichan! Today Cloudflare Access shipped a small but handy quality-of-life update for MCP server portals, and I want to walk you through it.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Over on Cloudflare's Changelog, MCP server portals picked up a homepage and a sign-out flow. MCP server portals let you publish MCP servers together behind Access, and this update makes opening one in a browser a lot friendlier.

The story so far

Until now, opening a portal's domain in a browser didn't give you much to work with. You had to keep track yourself of which endpoint to paste into your MCP client.

What changes

Now when you open the portal domain in a browser, you get a proper homepage:

  • The portal name and your organization's branding
  • The MCP endpoint URL, with a copy button
  • Connection instructions for several MCP clients (Claude Desktop, Workers AI Playground, OpenCode, Windsurf, and more)

So instead of wondering where to paste what, you can copy and connect right away.

Dive Deep

Signed-in users can see their email address and a sign-out button. Pressing it kicks off a thorough cleanup. Here's how the original puts it:

revokes all portal-level OAuth grants, deletes upstream server OAuth states, and redirects through Cloudflare Access logout.

So it clears every portal-level OAuth grant, drops the upstream server's OAuth state, and finishes by redirecting through Cloudflare Access logout. After signing out, you land on a confirmation page summarizing which sessions were revoked, so you can see for yourself that everything closed cleanly.

Wrap-up

  • MCP server portals now have a homepage and a sign-out flow
  • The homepage shows connection instructions and a copyable endpoint URL
  • Sign-out revokes the portal's OAuth grants and upstream state, then hands off to Access logout
  • A quiet but useful win for anyone handing out MCP servers to their team through Access